VULNERABILITY

CVE search

Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.

402,405 vulnerabilities · 1,766 actively exploited (CISA KEV)

sir ✕Clear filters

42 results

ID	Severity	Summary	Published
CVE-2018-18668	보통6.1	GNUBOARD5 before 5.3.2.0 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "homepage title" parameter, aka the adm/config_form_update.php cf_title parameter.	26/08/2019
CVE-2017-18572	보통6.1	The gnucommerce plugin before 1.4.2 for WordPress has XSS.	22/08/2019
CVE-2016-10920	보통6.1	The gnucommerce plugin before 0.5.7-BETA for WordPress has XSS.	22/08/2019
CVE-2018-18676	보통6.1	GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "mobile board tail contents" parameter, aka the adm/board_form_update.php bo_mobile_content_tail parameter.